Rename security clarification doc file and update README reference

[Copilot]

The issue requested a filename cleanup so the branch is merge-ready. The document content was already correct; only the file naming/reference mismatch remained.

• Filename normalization

  • Renamed standalone security clarifications document:
    • SECURITY_ASSESSMENT_ZH.md → SECURITY_ASSESSMENT.md

• Reference alignment

  • Updated README.md to point to the new filename.

- [Security Assessment Clarifications (23 items)](./SECURITY_ASSESSMENT_ZH.md)
+ [Security Assessment Clarifications (23 items)](./SECURITY_ASSESSMENT.md)

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[Copilot]

Pull request overview

This PR aligns repository security documentation naming/references and updates related project metadata/logging to be merge-ready.

Changes:

• Adds/normalizes the standalone security assessment clarification document as SECURITY_ASSESSMENT.md and links to it from the README.
• Updates request logging to avoid printing API keys.
• Bumps the lockfile package version to 0.0.19.

Reviewed changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 2 comments.

File	Description
src/core/BaseMcpServer.ts	Replaces API-key-value logging with a non-sensitive log message.
package-lock.json	Updates the lockfile’s package version to 0.0.19.
SECURITY_ASSESSMENT.md	Adds the security assessment clarifications document under the normalized filename.
README.md	Adds a “Security Assessment Clarifications” section linking to the standalone doc.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

This log line says an API key was received even when requestApiKey can be undefined (when no header/session/default key is set). Consider logging conditionally when a key is actually present, or rewording to something like “API key lookup performed” to avoid misleading/noisy logs on every request.

Suggested change

	Logger.log(`${this.serverName} API key received from request context`);
	Logger.log(`[${this.serverName}] API key lookup performed for request context`);

[Copilot]

This README link will work on GitHub, but it will be broken for npm consumers because package.json publishes only dist/** and README.md (the SECURITY_ASSESSMENT.md file is not included in the package contents). Either include SECURITY_ASSESSMENT.md in the published files list, or change this link to a GitHub URL.

Suggested change

	- [Security Assessment Clarifications (23 items)](./SECURITY_ASSESSMENT.md)
	- [Security Assessment Clarifications (23 items)](https://github.com/cablate/mcp-google-map/blob/main/SECURITY_ASSESSMENT.md)